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^^^^ 
^•^^^ 

JJL ^ it/- >^^t]^ ^^^^^ ^^^A RSA «J , 'fe 
1024 J:b#fiJ 2048 tb#. ^f-^4^6<>^iifci±-|^, -f-ft/*^^t;t^#t^^§4lS:i+^6<» 

2000 ^¥^m^:^KiHyoung KO. Sang Jin Lee CRYPTO 2000 ^ 

H. Ko, S. J. Lee, J. H. Cheon, J. W, Han, J. S. Kang and C. S. Park, New 
Public-Key Crytosystem Using Braid Groups, Proc. of Crypto 2000, LNCS 
1880, Springer-Verlag (2000) 166 183. ), ^>sa>#^#J#5'J 1 1'^^^ 

m^t¥j^^^Zm'\—^^k.^—A-m^ii^n'A:^'^<> J-5'J 2003-^, # 
m^:^KiHyoung KO. Doo Ho Cho ^^^"^^^^^^^^^ 
( Ki Hyoung Ko and Doo Ho Choi and Mi Sung Cho and Jang Won Lee 
New Signature Scheme Using Conjugacy Problem Cryptology ePrint Archive: 
Complete Contents 2 003/1 68) Wi-^^^m^^^i^M iSCSS)^:^:^^^^^^^ 

(CSS), ^-fn M^^^ scss i^x^ CSS ^^m^^s . 

t^^^4l&^;g>f^^J SCSS: 
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: Sf^^-'A-^M tt.# ^ .t' M> M ifj^J^ signCM)=a'ya , 1 1'^ 
^nSL: —^^S sign(M)A4-}i:ir^, ^ JL>(5L ^ : sign(M)^ y ^^3.x' sign(M) 

^^^t.%Mm. ^?k-cspHM.. ^1 ^M.'^-^xnM.^ mn^^i css^s^ 

b-'xb ,y=h(Ad\\a), p = Y = r'aj;a"'^',>ft''^'M6t^^5/gwCA()= 

(a, p, Y)o 

a ~ X, P ~ Y ~ y, a P ~ xy, a Y ~ X, y. 

CSS^^^M^'S-^]^r^¥^f^:^b, iiljtM^^6^^^1T k-CSP is. 

;Sif'^:k.-$:^m¥'-i'f^^'Mit^, ^ CSS^M-'A SCSS t ^ k-CSP 
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#4^ lb. #^^7Gx^^7b#>^^iC;c=A"7T,7r2 - TT/; 
Ic, ^^iL b M,^$k4- B„ (5 1) 

##le. I^jfcai/^i— :itp;Jf;l, 'i'\^x =decycling(x), a= a nr, ^Jj!>J , 

- #mif. ^''Jtfx'A^/i,i^^^5'5S'(x>:A;s. i(x') <dA^^^^. ^^AJL 

^di (x,x') ^y^m, a^^A^; ^y^—^r-AsL, m^n^me. 

^^H(M)—ifL^:^^ i:^Rj\\R2\\ - \\Ri\ 
M h(M)o 

#m l.^^mi^ V4^'^^S:^S^i^^^t.t-Mi^J,;SiM^^J^ Sign(M) 
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■^WiS.^SmS-^ vmt^^:^S^m,¥j^^,t'M\iA:&^Misfj^J^ Sign(M) 
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■^m^ ei^^6^ S 6^>4H6^it# sign(M) x'^xy, 

^^m^Tt^b-^a, ^^b^^M^, ^<fL^J^ik^^ b—k.:^^—^y 

t SCSS ^J^^^M'^^—'l^^ a ^^^mM{sign(M), h(M))^^¥.7t^ 

k-CSP nM., ;^iLBa4^#6^^^^^J ECSS if^n^^^^^'^^^i^^ 

■^rst^'i^, jl^;&px— >M^*i^^it, m^J'^^^^^^^^^t,^, ^^^s^ 

^fi^ CSS T m^^^M 



^ 1 













SCSS 


^?'Ji+#: life 




1 >h^7t 


MCSP 


CSS 




•ft?«Ji+#: lik. 




^, )^:*:T ;k-GSP R 


S^iECSS) 






1 ^lf>L 


Jig., ^-f MCSP n 
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^^XmM$m-k^^ff\^ i^"^ ^ mKi9L%¥i$JB:X=3. d=4, 2''<p<2'^ 
r=3): 



n 














20 


370 


1653 


17.82 ms 


18.68 ms 


30.87 ms 


2220 


24 


478 


2138 


21.70 ms 


22.79 ms 


41.75 ms 


2356 


28 


591 


2648 


24.42 ms 


25.77 ms 


59.59 ms 


2530 



m 5 ^^ih^^n CDP BCDA i^myMMm; 

^^^^^^ 

T: 

aiGj = ajQi (|f-7i>l, Ki, y<«) (D 
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OiCjOi= GjGi 7|>1, Kit j<n) (2) 

i^n-j-m- ^^^/t^^. ( 1 ) -fir^Cx, y) ^ LB,„ ^RBn.j.„, ^xy=yx, 
y^^—^^7tb, ^'ftk.X&'t-a,, a 2 o^.x^:^^ax, a 2 a„.i 

M^-a^b^^/L. ^7LA=(aia2- crn.i)(aia2— CT„.2)— (aia2)(cTi)# 
>h5-^7r :{0, 1, ... , n-1} {0, 1, ... , 'fi^ 

^A-^Ttb^^^^'^—^—^WS-^-^'^^^- b= A"7Ti7T2 7T/, ^ t TT 

— >hJ.^^iG. b^JL^^^^:iL-iiPr: inf(b)=u, sup(b)=u+l , /fZ>; =/o 
M^^^x, i^^x--y, ^¥^7ta^^^^¥.^ ix, y) 

^iG)«t (x, y) eSn^Bn, S^Wx ~ yA^A:^. ^it-f'fi 

CDPf^J^. WW GSPI»l:IS.3lfc^^g: 5fti^— >hiS'^6^^4€.^it5?t (x. y) ^B„ 
^B„{x ~ y), m^]—^m^aeB„, m^y=a'xa. ^ 1^ 

;:f;^^--yJ-;;^^6^^^-prkX^^:^iUt!«"3!*l)§^^ CSP N^, @ jkb^^tl^^i^^ 
6^— (;c, y) eSn^Bn , ^.-fH^^ C5P ^©^^^ 
f^^o ifn;if^SL^^it^S^^^^:^^)kiif}^^'}^A^^^ MCSP HM ( ESe.*4€. 

MCSP f^^-^ CSP f^^6t SD^^^-f^'l^. MCSP MM-^^it^^i^itoT: 
ej^: mf^B„^—^^¥^(x, x') €Bn^B„. ^—A-^TtyeBn 

f^^: ^f'J— €5„';^;l; ~ y xy - x y 
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,B„ii^^^7t^ O1O2 a„.i,^f^^Z,5„^4->^it Gj , ^2 a 

J^y>^^—^ csp i^M^m^^^M.il^■^^^ ix, X') eiBm^Bn. 

a CB„, MJ^x' =a^xa; 

^-ft^-ft^'J >^#t A if^f ^'J 3/=;iW> "i^^ i'^^^ 

Ttb €RB„.,.„,, if%byb-\ if^^yH >t^ Mit^^S sign(M)=a-^byb-'a, ^^S^ S 
.1: MU:S^M Sign(M) #r {±1 . 

^^yJi^ (x, x ), ^y=h(M), ^M'^ikii^^J^ sign(]i^m^sign(M) ~y> x' 
sign(M)'-xy, W^m^^jit^l^Tk MCSP 0 atb tfe'fitf j 6^ . 

^q5lt■f-^^>^^lt^#6^>■^'4^^^ b-'ayia'b), T 

Ci^: k^^^^ix], x/). Axk,Xk) ^B„xB„3.Xi' =a'xiCi k}, 

^^^'J6 eBn. "i^^xi =b-^Xib 2 kX 

^:>C'fife.6^super summit ^5SS'(3c;=^e j)/ -jc, inf(y)-F Maxinf(x) , 

X , ^ X , 3/ fHj 6^ tf(3c , y)=min{l(b)\y-= b-'ab } , ^ ^ 

j(x,tf) = {yeSS',S(x)|c/(x,:)^)<i/}. i^:?U'e5(3c, 6?;, Wi^¥j^ (x\ x) ^CSPt^M. 

%^RSSBG(x, dMx\ a)^VXWiJ^f'^x^s(x, d)M.x=a'xa, J^^^-H4t^ 

{x\ x) ^^^a, ^m^^^^^M^m: A^^m^T: 

#m 11. ik'^n-'^^^m^n^^^M^^tn d; 

^mi3. mMsit^-^m7tbM,^^^B„(5 0; 
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#4^15. Wff^f^—^M^y -IfP^ly Mif^x'=decycling(x'),a==a7r,; 
^Jil'J, if^x'=cycling(x'), a=aT"(7rj)', 

■^me. ^mx'A^M,^^^sss(x)i^^:s^ i(x')<dA^#^-^. ^^^^^ 

it} Cx,x') ^>iH^. a^^i^m; Ji!'J#.##mi5. 
^<J,2ilfc#{0, l}*>ffi.^#f'J®^-ifcJL6^J^b#f {0, 1}^. ^^N =l[log2"'j^ ^ 

ML- 

s x^^^^^^ y- 

^ xy A^--^^^^ BCDA. BCDA -^m 5 Pfclr^'. 

f']¥i—A-^$k.i g-^det(0(g) -I). Bn(l 0(g)^gi^Burau^^. I 
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ff}^U^^^^g(t)¥i^d(Ps(t)) < l(n-l)n/2. n^^^m^a, 6e 5,.(7 ) A 
Z/pZX^Mi^^r^r-^^^^tn t2 ... tr. ^^"f^A^mid^L 2 rJ^ 
:^mPa(t)- Pb(0 =0A^r.^l(n-l)n/2^JiK ff(^J^¥.^Pr[Pa(t)^ P,(t)\^m^U^ 

Maxinf-Minsupmi^o ^^^^^x eBn(l ) > :fL^Maxinf(x) ^ Max{inf(y)\ 
y X, yeBn(l ;}> Minsup (x ) =Min{sup(y)\y ~ x, y€BnG)} - ^ 
Maxinf-Minsi^miK, ^?^f^^a, b eB„(l )^ ^']^Maxinf(a)= Maxinf(b) , Minsup 
(a) =Mmsup (b ) J^'J^ttjl, ^J9'J%iliO. T^^ 

^i\!^Maxmf(x)^Mimup (x) -t;Jt^5C^>h#'ft, ^x=A"7Ti 

7T2.- TTi > cycZm^ r;c;=rrY^z>A^Y^z;^ decyclmg(x) ^nr'xni, ^^tx 

^^m\^Xnm^n(n-l)/2mnf{kZ-^^im (5i^^#^j>' ), Ji!'J ^#6^/0:1:6^ 

Birman, K. H. Ko andS. J. Lee, Thein.mum, supremum and geodesic length 
of a braid conjugacy class , to appear in Advances in Mathematics. . 
>kX^^^O( fnlogn). 

■kv^f^Xja, feitit T ^mni^^Maxinf-Minsupm'iK, M'^^^ ^'J^flt ~ 

K. H. Ko, S.J. Lee, J. H. Cheon, J. W. Han, J. S. Kong and C. S. Park, New 
Public-Key Crytosystem Using Braid Groups, Proc. of Crypto 2000, LNCS 
1880, Springer-Verlag (2000) 166 183. 

f^^—A-^'^ii^^^sign(M)y i£i^sign(MO=a'^byb-'a= (b''a ) ''yb''a, ik. 
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sign(M) ~ yASL; ^x' sign(M) =d^xa d'byb''a-= d'xbyb''a> ^^x^LB„, 
b eRBn.i.m> l^jttocfe =bx> ^Xifn^^x sign(M) =a''xa a'^byb''a= d^xbyb'^a =d' bx 
yb-'a= (b''a)-' (xyJCb 'a), ^^x sign(M) ~xy. n^—A-"^'^^^^ 't-A 

^;&#Sij5zgw(3l<) '=d'byb-'a^, ^'A.^MUAM^^:^Sign(M)^m.^^'iS.^ . 

^mu ^z^si^^^^^^ ^LBm(i), x' eB„(i), aeBji). ^k.^mn 

15 #^2. ^s.^s%^'^^^^mH>%M\m'iKH^mim'\y=hm esjo; 

W^Pt^b^')H >%M^^ ^■^Sign(M) ^d^byb'^a; 

^ms.^S^riSL:^ V^t^^S^ S ^i^ii^^tM: MV^^M^^^J^ Sign(A^ 
20 ^y^Sii^^2^', 

#i^8. ^^Z^^y^^S^^^'i'\%sign(M^ X' ^xy, 

i<7T;?lit#^^M., t^iSi!^ 
^,M.##t«, i/(4M^l=3, d=4). 4-5„(7 ) = {b £B„\0<irf(b), sup(b) < 

I }, J3'J|5„^)|<r«//i(7^F^6^. nm.B„,(l ) = {b eLB„\0<inf(b), sup(b) 



- 11 • 
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< / } , RBn.i.m(l ) = {b ^HBn-i-m \ 0 <inf(b) , sup(b) </}. xti=— >^^iOi^^ 



-t 

1 1 





"l t 








-t 




1 t 




1 1 


... a i — 


-t 








1 




1 







1 t 



-t 



7=3, 2'' ~ 2«fS]), v>^;S.^W;t'J^/«(#^«-'«^4ife.;^); i^^^^li^ 

3. im^m> if sign . 

2s ^km^')^BCDAn^ign (M) ~yA^A^> ^^A^, M^v^^^. 

- 12- 
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3. if$^x'sign (M)^xy\ %>i:BCDA^^]^'sign (M) -xyAJ^^^L, 
^>^>Eli£Bj y^XX '^^m^m ^X'dM ^iLHj ^^^^ ^^^h 



13 - 
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i^mu is) i^^^A-m^^LBji), X' eB„(i), aeBji). ^m 

(x'> x)^A^^^ (S) ^Tta^^^S^ is) m^^; 

#^2. ^S:^(S)5^'^^^^ii^yM>t^iM)^^m^9*]^^^^'\y=h(M) e 
B„(l)\ 

W^f#7tZ>55t>-^'4 (M) ^^^$^\Sign(M) =d'byb-'a\ 

#^4. is) ^'MMs: iM) ^>^^>■^^l^ iM) ¥i^:^Sign(M)%^, 

ff^ziL-^mi^^^^ is) ^^^¥^yLf!^ix'> x)^^^^^7ta^^^^^^^i^^ 

#W Ic. nM^^—A-^yt. b M,^^^ B„ (5 1); 
#W Idx if^x'=b-'xb,a=b; 

#^ le. Pl^/'^— I, M-ifM-x =decyclmg(x'),a=a^h 
1, i\%x=cycling(x), a=aT''(7Ti)\ 

^^^^ ix,x) a^^^i^^\ ^^>^^, J«!'J#l##mie, 



• 14- 
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^P/r^^ h(M)o 

1=3, d=4, VA^^^^^'h n-m=4o 

^r-^m^, m sign(M)r-A.—^^>^^s , m^^^-, 7^^^> msign(M) 

^xyA^--^^^m^y^BCDA. 

^J^^ is), ^^ms.:^ (F), t^^^^yM.t- iM), W 

i^ms is) ^^^^^Tt-^^LBjl), X' € 5„(/), a€ 5„(/). -f^^ 



. IS- 
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(x', jc)^^^^^ is) ^^a^^^J^^ (5*) 

Bn(l)\ 

«;uI^7GZ)^>'^'4 (M) i^Z^^nSign(M) =a^byb-^a; 

#^4. is) #>-^M: (M) f:^;5L>'^Mr (M) .SigwC^^iiji!^ 

^S^t^:^ (V); 

^'/gwCAO^^' ^^^^^ (S) i^^^^; 
#j^lb. #l^iGJc^T5^jH;#>^^iCji:= A" 71,712 7T/; 

ic. i^^A.x^#— >h^it 6 /^f-^^ 5„ 

^m-ld> if^x'=b-'xb,a=b; 

■^m-le. ^M^f^—A-i^t!^, I, m\^x ='decycling(x).a=a7r,\ 

1, if^x'^cyclingCx), a=aT''(7rj); 
^mf> ^^]mx'A^M,^^^SSS(x)^^^^ l(x) <dA.^^^SLy ^^M^SLt^ 

10. 8 fr^^^-^^n^m.^^^^^:B^$s^'i^-^'^^ ^ 



- 16- 
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^^H(M)—?fL^i^^ lJ^Rj\\R2\\ - \\Ri\ 

11. 8 9 10 P/r^ii(}^^mn4k¥.^i^^^S:s^^m^ 

12. 8 PJfi^^&.^my^.4k^^St^^S^^^^'^> ^ 
x'^xy A.^^^^)^ BCDA. 



• 17- 
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r 


it#M6<;f[?»Jity=h(M) 




r 






r 


i+#byb-i 




r 


it#sign(M)=a-ibyb-ia 




r 
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T+#x'=b*-lxb. 
a>b 





r 






x' = decycling (x'). 




x'=cycling (x') , 
a- ar^CTTj) 












(x. x') ^y^^. a^^m 
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r 








l[log(2.nl)] 




r 




imillR2||...||Rl 




r 






h(M) 


« e 




r 




^TGAi 




r 


i » 


i+1 


h(M)=h(M)Ai 



N 



© 3 
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r 


mx^^m (x,x ') 




f 


it#mfl?lg:?«{Sy=h(iii) 




f 


^mU^BCDAm&y, sign(m) 




f 




i 


f 


itfflCxy, x' 


sign (m) 



xy, x' sign(ni) 



Sign(in)~xy, 



m 4 
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fiE a r 




r 


^ Pb ( t) 




r 




= 0 




r 




^ z/pzw Jfg 

ti 




r 


Th#Pa(ti) &.R 
Pb(ti) 




r 




•H- fit Maxinf (a) U R 
Maxinf (b) 




r 



a'^ b^ ^ 3i 



LnfJ 



Th#Minsup(a)yJl^ 
Minsup (b) 
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